CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

CVE-2012-4510

CVE-2012-4510 affects cups-pk-helper before 0.2.3, where insecure wrapping of cupsGetFile() and cupsPutFile() enables user-assisted remote attackers to read or overwrite sensitive files via CUPS resources. Impact is partial confidentiality and integrity, with no availability impact stated. Affect...

CVE-2012-4510: Undefined Security Weakness

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

PT-2012-1034

Name of the Vulnerable Software and Affected Versions cups-pk-helper versions prior to 0.2.3 Description The issue allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources due to improper wrapping of the cupsGetFile and cupsPutFile function calls. This can...

CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

Debian Security Advisory DSA 2562-1 (cups-pk-helper)

The remote host is missing an update to cups-pk-helper announced via advisory DSA 2562-1. OpenVAS Vulnerability Test $Id: deb25621.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2562-1 cups-pk-helper Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian: Security Advisory (DSA-2562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2562-1] cups-pk-helper security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2562-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

Debian DSA-2562-1 : cups-pk-helper - privilege escalation

cups-pk-helper, a PolicyKit helper to configure CUPS with fine-grained privileges, wraps CUPS function calls in an insecure way. This could lead to uploading sensitive data to a CUPS resource, or overwriting specific files with the content of a CUPS resource. The user would have to explicitly...

[SECURITY] [DSA 2562-1] cups-pk-helper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2562-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: spice-gtk security update

Updated spice-gtk packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2011-5099: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2077

Name of the Vulnerable Software and Affected Versions ccNewsletter mod ccnewsletter versions 1.0.7 through 1.0.9 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the helper/popup.php file. Recommendations For versions 1.0.7 throug...

Viscosity OpenVPN OS X Local Root

!/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source alternative. Unfortunately, this exploi...

Viscosity - Local Privilege Escalation

Viscosity - Local Privilege Escalation !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source...

DEBIAN-CVE-2012-3465

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/sanitizehelper.rb in the striptags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup...

Cross site scripting

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

CVE-2012-3463

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

CVE-2012-3463

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...